← Rules Catalog
mediumkernelverified rollback-safe

Disable uvcvideo kernel module

kmod-disable-uvcvideo · RHEL ≥ 8 · 1 impl

Description

The uvcvideo kernel module provides driver support for USB Video Class devices such as built-in and attached cameras. On systems where the camera is not required, the module must be disabled so the device cannot be activated.

Rationale

Disabling an unused camera driver prevents the collaborative computing device from being activated unexpectedly and reduces the kernel attack surface.

Check → Remediate

Checkkernel_module_state
name:
uvcvideo
state:
blacklisted
Remediatekernel_module_disable
name:
uvcvideo

Framework references

STIG

V-230493 / RHEL-08-040020

NIST 800-53

CM-7

Live verification

rhel8:check
#kernel-module#camera#attack-surface